CLEANSTART-2026-PV37288 DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator

CVE-2026-83557 affects multiple packages. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details...

CLEANSTART-2026-HR33397 DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator

CVE-2026-83557 affects multiple packages. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details...

ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +11720 more potentially affected by CVE-2026-83557 via tools.jackson.core:jackson-databind (>=3.0.0, <=3.1.5)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.2.0, =0.2.0, =0.2.0, =0.4.2 and more Source cves:...

ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +34584 more potentially affected by CVE-2026-83557 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.5)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.10), ai.covia:covia-discord (>=0.9.4, <=0.9.9) +9469 more potentially affected by CVE-2026-83557 via com.fasterxml.jackson.core:jackson-databind (>=2.22.0, <=2.22.1)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.1.0-beta.1, =1.4.0, =1.4.0, =1.4.0, =2.0.0 and more Source cves: CVE-2026-83557 Source advisory: SNYK:JAVA-COMFASTERXMLJACKSONCORE-19496766...

ai.pipestream.proto-toolchain:ai.pipestream.proto-toolchain.gradle.plugin (>=0.7.24, <=0.7.26), ai.pipestream:quarkus-buf-grpc-generator (>=0.7.24, <=0.7.26) +2142 more potentially affected by CVE-2026-83557 via tools.jackson.core:jackson-databind (>=3.2.0, <=3.2.1)

tools.jackson.core:jackson-databind MAVEN version =3.2.0, =0.7.24, =0.7.24, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha6 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics...

UBUNTU-CVE-2026-83557

DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of "unsafe base types", and its isSafeSubType method returns true...

CVE-2026-83557

DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of "unsafe base types", and its isSafeSubType method returns true...

ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +34584 more potentially affected by CVE-2026-83557 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.5)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...

ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +11720 more potentially affected by CVE-2026-83557 via tools.jackson.core:jackson-databind (>=3.0.0, <=3.1.5)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.2.0, =0.2.0, =0.2.0, =0.4.2 and more Source cves:...